Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-0223
HistoryNov 23, 2013 - 12:00 a.m.

CVE-2013-0223

2013-11-2300:00:00
ubuntu.com
ubuntu.com
8

0.001 Low

EPSS

Percentile

44.2%

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent
attackers to cause a denial of service (segmentation fault and crash) via a
long string to the join command, when using the -i switch, which triggers a
stack-based buffer overflow in the alloca function.

Notes

Author Note
mdeslaur Debian/Ubuntu don’t use the vulnerable patch